Layer7 API Management

Expand all | Collapse all

Difference between audit.detailThreshold and audit.messageThrehold clusterwide properties

  • 1.  Difference between audit.detailThreshold and audit.messageThrehold clusterwide properties

    Posted Mar 21, 2017 03:43 AM

    Hey all,

     

    I need some understanding regarding the 2 audit cluster-wide properties : audit.detailThreshold and audit.messageThrehold.

     

    Below snippet of definitions taken from help center are not clear to me

     

    audit.detailThreshold : Minimum level for an audit detail message to be saved to the database.

    audit.messageThreshold : Minimum level for a message at the end of processing before it is saved to the database.

     

    I have observed below cases by altering the values of both the properties.

     

    Case

    audit.detailThreshold

    audit.messageThreshold

    Comments

    1

    Info

    Info

    INFO and WARNING both are logged

    2

    Info

    Warning

    INFO and WARNING both are logged

    3

    Warning

    Info

    Only WARNING Messages are logged

    4

    Warning

    Warning

    Only WARNING Messages are logged

     

    Can someone please clarify what is the difference between both the properties and in which scenario we should use them? Any use-case supporting the same? What differences will be observed in log files if we alter the values of these properties?

     



  • 2.  Re: Difference between audit.detailThreshold and audit.messageThrehold clusterwide properties
    Best Answer

    Broadcom Employee
    Posted Mar 21, 2017 11:08 AM

    Audit messages are the main audits representing a transaction, such as "Message Processed Successfully". The following screenshot shows the audit messages as seen in the Gateway Audit Event Viewer:
    audit messages

     

    Audit details are the associated logs that correspond to a single transaction, such as the information generated by the "Add Audit Detail" assertion. The following screenshot shows the audit details as seen in the Gateway Audit Event Viewer:
    audit details

     

    The cluster-properties set the thresholds for these audit types accordingly. So audit.messageThreshold will set the threshold of the audit messages from the first screenshot, and audit.detailThreshold will set the threshold of the audit details from the second screenshot.

     

    Regards,

    Azad